Since PKCS12 is simply a container for keys and/or certs, you can certainly craft a PKCS12 file with just a single key or just a single cert in it.
Unfortunately the current openssl pkcs12 command enforces a peculiar limitation that each PKCS12 file must have at least one cert and one private key in it, and they must match each other (i.e. the public key in the cert must be the other half of the private key). Luckily this peculiar limitation is removed in 0.9.8, so pkcs12 becomes usable. ----- Original Message ----- From: "Michael Krustev" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 14, 2002 10:38 AM Subject: Re: PKCS12 and Private Key No. It's not possible!!! Sorry, PKCS12 structure holds public/private key pair... --- Oliver Wulff <[EMAIL PROTECTED]> wrote: > Hi > > Is it possible to store only the private key in a > p12 file and hold the > certificate and ca certificates in another p12 file? > If yes, how can I do that? > > Oliver > > > > > > > ******************* BITTE BEACHTEN > ******************* > Diese Nachricht (wie auch allfällige Anhänge dazu) > beinhaltet > möglicherweise vertrauliche oder gesetzlich > geschützte Daten oder > Informationen. Zum Empfang derselben ist (sind) > ausschliesslich die > genannte(n) Person(en) bestimmt. Falls Sie diese > Nachricht > irrtümlicherweise erreicht hat, sind Sie höflich > gebeten, diese unter > Ausschluss jeder Reproduktion zu zerstören und die > absendende Person > umgehend zu benachrichtigen. Vielen Dank für Ihre > Hilfe. > > ______________________________________________________________________ > OpenSSL Project > http://www.openssl.org > User Support Mailing List > [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - Let the expert host your site http://webhosting.yahoo.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
